0e4bcd48acda010b2103c00824addccd99fabb99bbebd9e591cf1f17ef5e7ea3 | Triage

Sharing

General

Target

0e4bcd48acda010b2103c00824addccd99fabb99bbebd9e591cf1f17ef5e7ea3
Size

44KB
Sample

240901-xarwnayhqd
MD5

8b8758eb07422956d219e254b1cd9388
SHA1

77be7c389caba9cdf3fdd0f83a5634d672afadf9
SHA256

0e4bcd48acda010b2103c00824addccd99fabb99bbebd9e591cf1f17ef5e7ea3
SHA512

c9acc76e451c4e0cbec5d547fb9bbcf8a17e0767080929e51d918f1871ee169da1821ba44c62f2f1a6ca5088b4cd7938f2e58d2fc3190b3adea53e369dd4c3c5
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sczBywh:W7BlpppARFbhbt7Y7wTCnBx

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0e4bcd48acda010b2103c00824addccd99fabb99bbebd9e591cf1f17ef5e7ea3
- Size
  
  44KB
- MD5
  
  8b8758eb07422956d219e254b1cd9388
- SHA1
  
  77be7c389caba9cdf3fdd0f83a5634d672afadf9
- SHA256
  
  0e4bcd48acda010b2103c00824addccd99fabb99bbebd9e591cf1f17ef5e7ea3
- SHA512
  
  c9acc76e451c4e0cbec5d547fb9bbcf8a17e0767080929e51d918f1871ee169da1821ba44c62f2f1a6ca5088b4cd7938f2e58d2fc3190b3adea53e369dd4c3c5
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sczBywh:W7BlpppARFbhbt7Y7wTCnBx
Score

9^/10

discovery ransomware
- Renames multiple (3490) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware